Manifest

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e8c2b91d-34ed-48a4-b276-5be7c05382ca/4ef0dc5c32b62ada7aee4ef8dd5c57cd77d7ad59.mft
File:                     4ef0dc5c32b62ada7aee4ef8dd5c57cd77d7ad59.mft (raw, json)
Hash identifier:          wMkBTmPwHDZd2I3ayTmdbQ++vKXtRShGVVNKFQeli+s=
Subject key identifier:   E0:B1:E7:E9:D4:61:05:5F:A0:1E:7E:AA:C5:0A:84:25:C0:DD:8E:40
Authority key identifier: D1:4D:33:63:F4:7B:29:05:08:B3:F0:09:DF:FD:EC:A9:F9:71:9A:2F
Certificate issuer:       /CN=4ef0dc5c32b62ada7aee4ef8dd5c57cd77d7ad59
Certificate serial:       21E351
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ef0dc5c32b62ada7aee4ef8dd5c57cd77d7ad59.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e8c2b91d-34ed-48a4-b276-5be7c05382ca/4ef0dc5c32b62ada7aee4ef8dd5c57cd77d7ad59.mft
Manifest number:          0DDF
Signing time:             Mon 15 Apr 2024 11:21:10 +0000
Manifest this update:     Mon 15 Apr 2024 10:20:18 +0000
Manifest next update:     Thu 18 Apr 2024 13:13:18 +0000
Files and hashes:         1: 38aba7ec31f2bc7c8f7a4065f0d72743c031f34a.roa (hash: nsrvjXiEOOT8siaMeg3FgrmUi8dXFog10g1kb6dfpiI=)
                          2: 4ef0dc5c32b62ada7aee4ef8dd5c57cd77d7ad59.crl (hash: 7Y6vap6aQXWVgG0EVAdSqCHPhQQuT/YjaJUpuOFmkEQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2220881 (0x21e351)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ef0dc5c32b62ada7aee4ef8dd5c57cd77d7ad59
        Validity
            Not Before: Apr 15 10:20:18 2024 GMT
            Not After : Apr 18 13:13:18 2024 GMT
        Subject: CN=fa16a1422c91472afb506ea56fea5829feb2a556
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6e:fd:24:04:82:ed:08:78:10:b9:f1:b3:6f:
                    04:48:3c:95:d8:83:97:d5:65:a7:54:9e:da:ec:f0:
                    51:ca:2d:5a:98:86:c7:20:66:77:bb:5e:ce:83:37:
                    20:ea:67:06:bb:66:50:e5:6d:06:81:c0:ed:db:ce:
                    96:01:2e:38:45:cb:14:eb:a2:cd:c9:ac:7e:2a:a8:
                    e2:90:d0:72:25:bf:4b:2d:5b:c9:79:56:f9:19:b2:
                    e9:dc:8b:da:a8:96:81:c7:4d:e4:f1:fe:91:01:0f:
                    7b:00:50:f9:48:5f:76:06:e3:28:78:8e:16:ad:ed:
                    f3:6e:9d:1c:ac:22:0b:4b:c2:37:cd:0e:c0:be:7b:
                    bb:3e:b0:e9:aa:cb:a7:92:8b:da:49:39:be:a6:2a:
                    6a:22:80:60:2d:43:ea:a6:85:0c:d6:83:0c:07:41:
                    82:f5:18:6b:23:d6:97:49:fd:2e:52:a5:e8:b6:5d:
                    89:03:f0:be:db:70:e7:13:46:66:18:13:a7:3e:9a:
                    c8:2a:de:6e:36:a5:ea:d6:b2:c5:72:05:ca:57:b8:
                    32:9a:e5:7b:d8:d4:d1:a9:b5:14:61:05:54:e3:ac:
                    99:0b:62:ba:70:63:2f:26:be:4a:54:df:b8:4c:74:
                    c7:9e:b7:5d:c3:f4:c0:b7:f5:94:bd:75:ef:c5:2b:
                    bd:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:B1:E7:E9:D4:61:05:5F:A0:1E:7E:AA:C5:0A:84:25:C0:DD:8E:40
            X509v3 Authority Key Identifier:
                keyid:D1:4D:33:63:F4:7B:29:05:08:B3:F0:09:DF:FD:EC:A9:F9:71:9A:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ef0dc5c32b62ada7aee4ef8dd5c57cd77d7ad59.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e8c2b91d-34ed-48a4-b276-5be7c05382ca/4ef0dc5c32b62ada7aee4ef8dd5c57cd77d7ad59.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e8c2b91d-34ed-48a4-b276-5be7c05382ca/4ef0dc5c32b62ada7aee4ef8dd5c57cd77d7ad59.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:cc:a2:a2:06:1d:54:79:10:09:df:7b:07:35:4b:f6:15:ad:
         3c:9c:61:7c:30:29:3c:30:ba:b7:eb:4f:6d:69:1f:26:e9:79:
         e9:03:32:1d:44:43:8a:dd:fa:26:c5:f2:4c:6f:7f:6e:e1:24:
         6b:31:c4:45:ec:42:84:60:b1:28:4d:23:b7:21:e4:f8:21:27:
         ae:84:67:04:f7:2b:e0:06:5a:ff:7e:4d:c3:06:81:18:bf:8b:
         77:ed:2e:43:0f:7d:5c:5e:de:6c:21:c1:fe:4e:ef:3a:26:23:
         45:6a:9d:89:22:26:27:89:ae:9a:88:8a:f7:c9:a3:f2:a7:35:
         0e:63:4c:10:75:96:6d:26:10:bb:6a:9f:09:d6:8a:32:e9:f5:
         fb:29:2c:0a:48:28:e8:5f:14:3c:62:94:0b:91:56:21:31:70:
         8a:63:c5:bc:b8:55:f4:00:25:1c:41:78:9e:b4:76:7b:4d:a0:
         97:5f:88:42:44:8e:4e:e5:b9:8e:24:a2:9e:5b:40:de:d6:96:
         17:95:5b:58:da:0a:c5:9e:fb:d0:ed:58:6c:99:5d:8d:89:fb:
         13:ba:35:9b:b5:53:43:0d:dc:8d:97:69:ac:85:d5:31:c6:ed:
         9f:1e:69:fa:e0:6d:b8:72:8c:59:26:e9:9d:47:3d:3b:88:6b:
         32:47:54:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----